Lucene search
+L

520 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 9:6 a.m.10 views

CVE-2015-7227

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels...

3.5CVSS6.7AI score0.00787EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:23 a.m.12 views

CVE-2019-6833

A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU, which could cause a temporary freeze of the HMI when a high rate of frames is receive...

6.5CVSS7.1AI score0.01049EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:50 a.m.11 views

CVE-2011-4511

Cross-site scripting XSS vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 aka TIA portal before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime...

4.3CVSS5.9AI score0.01509EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/11 8:4 p.m.30 views

CVE-2025-3474

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

6.5CVSS7AI score0.00361EPSS
Exploits0References3
Packet Storm
Packet Storm
added 2025/04/11 12:0 a.m.324 views

📄 Netman 204 Authentication Bypass / Remote Code Execution

Netman 204 allows for remote command execution without authentication. Exploit Title: Netman 204 - Remote command with out authentication Date: 2/4/2025 Exploit Author: parsa rezaie khiabanloo Vendor Homepage: netman-204 https://www.riello-ups.com/downloads/25-netman-204 Version: netman-204 Teste...

7.4AI score
Exploits0
OSV
OSV
added 2025/04/09 6:15 p.m.3 views

CVE-2025-3474

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

6.5CVSS5.8AI score0.00361EPSS
Exploits0References1
NVD
NVD
added 2025/04/09 6:15 p.m.50 views

CVE-2025-3474

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

6.5CVSS0.00361EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 5:48 p.m.14 views

CVE-2025-3474 Panels - Critical - Access bypass - SA-CONTRIB-2025-033

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

6.7AI score0.00361EPSS
Exploits0References1
CVE
CVE
added 2025/04/09 5:48 p.m.85 views

CVE-2025-3474

CVE-2025-3474 concerns the Drupal Panels module for Drupal. A missing authentication for a critical function creates bad access control, affecting Panels versions 0.0.0 through 4.9.0. The vulnerability can allow an attacker to view and modify blocks within variants without proper permissions, as ...

6.5CVSS6.7AI score0.00361EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/09 5:48 p.m.60 views

CVE-2025-3474 Panels - Critical - Access bypass - SA-CONTRIB-2025-033

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

0.00361EPSS
Exploits0References1
OSV
OSV
added 2025/04/09 5:4 p.m.5 views

DRUPAL-CONTRIB-2025-033

Panels enables administrators to add page variants within page manager, panelizer, etc to create custom pages. The module doesn't sufficiently protect sensitive routes, allowing an attacker to view and modify blocks within variants without requiring appropriate permission. This vulnerability is...

6.5CVSS6.8AI score0.00361EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/09 12:0 a.m.6 views

Drupal Panels module < 4.9.0 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Manuel Adán manuel.adan in WordPress Module Panels versions 4.9.0...

6.5CVSS7AI score0.00361EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.15 views

PT-2025-15836 · Drupal · Drupal Panels

Name of the Vulnerable Software and Affected Versions: Drupal Panels versions 0.0.0 through 4.9.0 Description: The issue affects Drupal Panels due to missing authentication for a critical function, allowing exploitation of incorrectly configured access control security levels. Recommendations: Fo...

6.5CVSS6.7AI score0.00361EPSS
Exploits0References6
Drupal
Drupal
added 2025/04/09 12:0 a.m.26 views

Panels - Critical - Access bypass - SA-CONTRIB-2025-033

Panels enables administrators to add page variants within page manager, panelizer, etc to create custom pages. The module doesn't sufficiently protect sensitive routes, allowing an attacker to view and modify blocks within variants without requiring appropriate permission. This vulnerability is...

6.5CVSS6.7AI score0.00361EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.9 views

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels, which stems from the use of weak encryption algorithms, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels is related to the use of weak encryption algorithms. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

6.5CVSS6.7AI score0.00164EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.7 views

The vulnerability of the microprogrammed software of the ViewJet C-more Series and GC-A2 Series sensor panels, related to unlimited distribution of resources, allows a intruder to cause service failures.

The vulnerability of the microprogrammed software in the ViewJet C-more Series and GC-A2 Series sensor panels is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.3CVSS6.2AI score0.00575EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.9 views

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels, related to information representation errors in the user interface, allows a intruder to replace the user interface.

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to remotely replace the user interface...

5CVSS5.8AI score0.00331EPSS
Exploits0References3
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2025/03/26 12:56 p.m.12 views

Minor update (2) for Vivaldi Desktop Browser 7.2

Download Vivaldi The following improvements were made since the first 7.2 minor update: Chromium Update to 134.0.6998.182 CVE-2025-2783 Crash Sending Tab VB-113521 Currency Widget The currency widget convert Japanese Yen and Chinese Yuan wrong VB-115291 LinuxMedia Not prompted to restart due to...

8.3CVSS5.8AI score0.08404EPSS
Exploits6References1
SUSE CVE
SUSE CVE
added 2025/03/01 2:52 a.m.4 views

SUSE CVE-2025-21819

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/display: Use HW lock mgr for PSR1" This reverts commit a2b5a9956269 "drm/amd/display: Use HW lock mgr for PSR1" Because it may cause system hang while connect with two edp panel...

5.5CVSS7.7AI score0.00181EPSS
Exploits0References13
NVD
NVD
added 2025/02/27 8:16 p.m.17 views

CVE-2025-21819

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/display: Use HW lock mgr for PSR1" This reverts commit a2b5a9956269 "drm/amd/display: Use HW lock mgr for PSR1" Because it may cause system hang while connect with two edp panel...

5.5CVSS0.00181EPSS
Exploits0References6
Rows per page
Query Builder